[irishsecurity]

Hello. So i did a uniscan and acunetix test and both came positive for sql injection but i cant seem to find a place to inject. Can someone please help me out glenceltic.com

[Mr.0_0]

What was the output of the scans that your ran?

[irishsecurity]

it came up with sql injection verified

[SIM-2793336]

it came up with sql injection verified

hi ...

tnx to MR O_O ..
you should upload scan result ..

server on your target :

Code

Apache/2.2.29 (Unix) mod_ssl/2.2.29 OpenSSL/1.0.1e-fips mod_bwlimited/1.4 Server at www.glenceltic.com Port 80

send your result ..maybe in result ..we can find thing ...
scanner = helper

good luck

[Gee4rce]

Usually i don't help people who just run scanners, but we can learn something here...
The only place an injection could take place is this the "pageid" parameter here: http://www.glenceltic.com/index.php?pageid=[SQLi]

But i checked back on this and it seems to be not vulnerable.
Thus, Acunetix produced a "false positive" result... and that's why you not use scanners 😅

Cheers, Gee.

[hаckеr]

I never use scanners. Unless it's nmap or Nessus. Everything else has false positives basically. Learn to find vulns manually.

[irishsecurity]

Thanks for the help guys.